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In the Claims; 

Claims are amended as follows: 

1 , (currently amended) A method of controlling one of a plurality of middleboxes 
In a communications network, each of the middleboxes being connected to a plurality 
of entities in an a respective one of a plurality of address lealm realms of the 
communications network, said method comprising the steps of:- 

(i) receiving a control message at a middlebox-ldentlty-providing 
node In the communications network, said control message 
comprising information about one of the entitles In the 
communications network; 

(ii) using the middlebox identity providing node to determine the 
identity of a first middlebox connected to said one entity in its 
respective one of the plurality of address realms : 

(iii) sending said identity to a middlebox control node In the 
communications network in order to enable said middlebox 
control node to send middlebox control messages to said first 
middlebox, said middlebox control node beino located in a 
different address realm than that of said one of the entities : 



and wherein the middlebox-ldentrty-providing node rs separate 
from the middlebox control node and is conn e ct e d closer - in - s€M 4 
communications n e twork to said ono of th o e ntiti e s than - t - ho 
midd l ebox^ontrol nod e located in a control signal path from said 
one of the entities to the middlebox control node . 
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2. (original) A method as claimed in claim 1 wherein said step (iii) of sending said 
identity comprises adding said identity to a control message and sending said control 
message. 

3. (original) A method as claimed in claim 2 wherein additional information is also 
added to the control message. 

4. (original) A method as claimed in claim 2 wherein said control message is a 
session description protocol (SDP) message. 

5. (original) A method as claimed in claim 4 wherein said identity is added to an 
SDP message using a pre-specified SDP attribute. 

6. (currently amended) A method as claimed in claim 1 wherein said control 
message is a call set-up message and said method further comprises controlling 
sending middlebox control messages to said first middlebox in order to set-up a call 
from said one entity to another entity connected to a second middlebox in the 
communications networl^. 

7. (original) A method as claimed in claim 6 wherein said second middlebox is 
connected to a plurality of entities in a second address realm different from the first 
address realm of the entities connected to the first middlebox. 

8. (original) A method as claimed in claim 7 wherein the middlebox control node is 
within a third address realm different from the first and second address realms. 

9. (original) A method as claimed in claim 8 wherein the third address realm is 
public. 
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10. (original) A method as claimed in claim 9 wherein the first and second address 
realms are private. 

11. (previously presented) A method as claimed in claim 1 wherein the mlddlebox- 
identityHDrovlding node is selected from: one of the middieboxes; a gateway in the 
communications network; said one entity, being a user terminal in the 
communications network; and a gateway comprising a business sen/ices channel 
manager (BSCM). 

12. (original) A method as claimed In claim 6 wherein said call passes through two 
or more middieboxes and wherein information about the identity of each such 
middlebox is added to said control message. 

13. (original) A method as claimed in claim 1 wherein said middlebox control node is 
a MIDCOM agent. 

14. (cancelled). 

15. (original) A method as claimed in claim 1 wherein each of the middieboxes is 
selected from a firewall, a network address translator (NAT), and a quality of service 
device. 

16. (original) A method as claimed in claim 1 wherein said middlebox-identrty- 
provfding node is arranged to determine the identity of the first middlebox by using 
pre-specified information. 

17. (original) A method as claimed in claim 1 wherein said middlebox-identity- 
providing node is arranged to determine the identity of the first middlebox by 
automatically analysing the communications network. 
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18. (currently amended) A communications network comprising: 

(i) a plurality of middleboxes, each connected to a plurality of entities 
a» a respecti ve one of a plurality of address fealr» realms of the 
communications network; 

(li) a middlebox-identity-providing node arranged to receive a control 
message comprising information about one of the entities and to 
determine the identity of a first middlebox connected to said one 
entity in its respective one of the plurality of address realms : 

(111) a middlebox control node an-anged to receive the detemiined 
identity of the first middlebox in order to enable said middfebox 
control node to send middlebox control messages to said first 
middlebox; said middlebox control node being located In a different 
address realm than that of said one of the entities^ said middlebox- 
identity-providing node being separate from the middlebox control 
node and being connectod c l ooor in said communications n e twork 
to sold on e- of th e e ntiti e s - than tho middl e box control node located 
in a control signal path from said one of the entities to the 
middlebox control node. 



19. (original) A communications network as claimed in claim 18 wherein said 
middlebox-identity-providing node is further arranged to send said determined 
Identity to the middlebox control node as part of a control message. 

20. (original) A communications network as claimed in claim 19 wherein said control 
message is a session description protocol message. 



21 & 22. (cancelled). 
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23. (original) A middlebox cxjntrol node arranged to control a plurality of nrilddleboxes 
in a communications network, said middlebox control node comprising: 

(i) an Input arranged to receive a control message comprising 
information about the identity of one of the middleboxes; 

(ii) a processor arranged to issue messages to the identified 
middlebox in order to control it; such that in use the middlebox 
control node is able to control the identified middlebox without 
the need to maintain its own store of information about the 
identities of the middleboxes and without the need to maintain 
its own discovery mechanism to discover the identities of the 
middleboxes. 



24. (cumently amended) A middlebox-identity-providing node for use in a 
communications network comprising a plurality of middleboxes, said middlebox 
identity providing node comprising: 

(i) an input arranged to receive a control message comprising 
information about one of a plurality of entities in the 
communications network; 

00 a processor arranged to determine the identity of a first 
middlebox connected to said one entity in a respective one of a 
plurality of address realms : 

(iii) an output arranged to send said identity to a middlebox control 
node in the communications networ k, said middlebox control 
node being located in a different address realm than that of said 
one of the entjties: and wherein sard middlebox-identity- 
providing node is arranged to be connected closor In caid 
oommunioationQ network to caid on e of th e entities than tho 
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middl e box control node located in a control signal path from said 
one of the entities to the middlebox control node. 

25. (cunrently amended) A computer program comprisina program instmctions 
arranged to control a middlebox control node, said middlebox control node 
comprising an input an-anged to receive a control message comprising information 
about the identity of one of the mkJdleboxes; and a processor arranged to issue 
messages to the identified middlebox in order to control it; such that in use the 
middlebox control node is able to control the identified middlebox without the need to 
maintain its own store of information about the identities of the middleboxes and 
without the need to maintain its own discovery mechanism to discover the identities 
of the middleboxes; 

the computer program comprising program code executable by the processor 
in order to enable the middlebox control node to: 

receive a control message comprising information about the 
identity of one of the middleboxes; and to 

- issue messages to the Identified middlebox in order to control It 

26. (original) A computer program as claimed in claim 25 which is stored on a 
computer readable medium. 

27. (currently amended) A computer program comprising program Instructions 
arranged to control a middlebox-identity-providing node, said middlebox identity 
providing node comprising an input arranged to receive a control message 
comprising information about one of a plurality of entities in the communications 
networic; a processor arranged to determine the identity of a first middlebox 
connected to said one entity in a respective one of a pluralitv of address realms : and 
an output arranged to send said identity to a middlebox control node in the 
communications networ k, said middlebox control node being located in a different 
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address r ealm than that of said one of the entities : and wherein said middlebox- 
identity-providing node is arranged to be c l os e r in so id-^ mmun i cat i ons network to 
safd ono of tho ontities than the middl e box control node located In a control signal 
path from said one of the entities to the mrddlebox control node : 

the computer program comprising program code executable by the processor 
In order to enable the middlebox identity-providing node to: 

receive a control message comprising Information about one of a 
plurality of entities in the communications network; 

- determine the identity of a first middlebox connected to said one 
entity; and 

- send said middlebox identity to a middlebox control node in the 
communications network. 

28. (original) A computer program as claimed in claim 26 which is stored on a 
computer readable medium. 
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